CLAIMS 



1. A management method of network devices, wherein a 
plurality of network devices compose a cluster, and wherein 
at least one network device is set as the cluster management 
device and configured with a public IP address; other network 
devices are configured and updated with private IP addresses 
and routes by said cluster management device; said network 
management device manages the network devices in the cluster 
according to the following steps of: 

(A) establishing IP data channels via said cluster 
management device between the network devices in the cluster 
and said network management device by said cluster management 
device; and 

(B) managing the network devices in the cluster through 
said IP data channels by said network management device. 

2. The method according to claim 1, wherein said cluster 
management device configures and updates other network 
devices with private IP addresses and routes according to 
information of topological architecture of the network and 
device information of the network devices in the cluster. 

3. The method according to claim 2, wherein said cluster 
management device configures the other network devices with 
private IP addresses dynamically. 

4. The method according to any one of claims 1 to 3, 
wherein said cluster comprises a plurality of said cluster 
management devices, and one of the cluster management devices 
is responsible for managing the configuration and update of 
private IP addresses and routes of the network devices in the 
cluster as well as the communication between said network 



management device and the network devices in the cluster; in 
case said cluster management device fails, one of the other 
cluster management devices is designated to be responsible 
for managing the configuration and update of private IP 
addresses and routes of the network devices in the cluster 
as well as the communication between said network management 
device and the network devices in the cluster, according to 
a predetermined policy. 

5. The method according to claim 4, wherein in step (A) , 
said cluster management device establishes IP data channels 
via said cluster management device between the network devices 
in the cluster and said network management device with stream 
transform technology. 

6. The method according to claim 4, wherein in step (A) , 
said cluster management device establishes IP data channels 
via said cluster management device between the network devices 
in the cluster and said network management device with network 
address translation technology. 

7. The method according to claim 4, wherein the plurality 
of network devices compose a cluster through the following 
steps : 

(1) designating a device in the network as the cluster 
management device and configuring the device correspondingly 
by the network management device; 

(2) initiating a topology acquisition process to acquire 
information of topological architecture of the network within 
a specified number of hops in the network by the cluster 
management device ; 

(3) designating candidate devices to be added to the 
cluster in the topological architecture according to the 



-26- 

information of topological architecture acquired from the 
cluster management device, and informing the cluster 
management device to start the cluster member device addition 
process by the network management device; 
5 (4) adding the designated candidate devices to the 

cluster and configures the candidate devices correspondingly 
by the cluster management device, so as to make the candidate 
devices become member devices of the cluster; 

(5) after the cluster is established, managing the member 

10 devices in the cluster by the cluster management device, and 
forwarding management messages which are from outside of the 
cluster and destined to the member devices through standard 
Network Address Translation (NAT) process to corresponding 
member devices to process, and processing the management 

15 messages according to normal processing process by the member 
devices . 

8. The method according to claim 7, wherein said 
configuring the cluster management device correspondingly as 
described in step (1) includes configuring the following items 

20 on the device: cluster name, enable state of cluster, 
management IP address pool of cluster, state retention time 
of cluster, handshaking time interval of member devices, role 
of the management device in the cluster, and IP address of 
the management device. 

25 9. The method according to claim 7, wherein the process 

of adding candidate network devices to the cluster in step 
(4) comprises: 

(Al) sending cluster addition requests to candidate 
network devices that can be added to the cluster by the cluster 
30 management device; ; x 
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(A2) determining whether it can be added to the cluster 
or not according to its own condition by each candidate device; 
if the candidate device can not be added to the cluster, feeding 
back a reject response and terminating the cluster addition 
5 process; otherwise feeding back an accept response to the 
cluster management device; 

(A3) after receiving the response from the candidate 
device and if the candidate device agrees to be added to the 
cluster, sending a configuration message containing private 

10 IP address, member number, handshaking interval, state 
retention time, etc. to said candidate device by the cluster 
management device; after receiving the message, configuring 
the candidate device correspondingly, and sending a complete 
response to the cluster management device after the 

15 configuration. 

10. The method according to claim 9 , wherein in step (A2), 
determining whether the candidate device itself can be added 
to the cluster is implemented through determining whether the 
candidate device has already been in another cluster and 

20 whether software version in the device supports cluster 
management . 

11. The method according to claim 9, wherein in step (A2), 
before feeding back the accept response to be added to the 
cluster to the cluster management device, the candidate device 

25 will determine whether a super user password is set on itself; 
if a super user password has not been set, the candidate device 
feeds back the accept response message to be added to the 
cluster directly; if a super user password has been set, the 
candidate device feeds back an authentication request to the 

30 cluster management; then, the candidate device authenticates 
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itself according to the authentication information sent from 
the management device; if the authentication is successful, 
the candidate device feeds back the accept response to be added 
to the cluster; otherwise feeds back a reject response to be 
5 added to the cluster to the cluster management device. 

12 . The method according to claim 7 , wherein the necessary 
configuration for each member device added to the cluster in 
step (4) includes configuring each member device with the 
following items: member device number, private IP address of 
10 member device, name of member device, state of member device, 
operating state of member device, and cluster management 
password. 

13. The method according to claim 7, wherein the 
identification of each member device added to the cluster in 

15 step (4) is performed with a data structure comprising the 
following fields: 

network type: designed to identify the type of network 
where the device is; 

physical address: designed to identify the physical 
20 address of the device in the network. 

14. A cluster management apparatus for network devices 
comprising: a cluster device manager and a member device 
manager, wherein: 

the cluster device manager comprises: 
25 a translation module, designed to perform network address 

translation for management messages of member devices; 

a Dynamic Host Configuration Protocol (DHCP) -like module, 
designed to accomplish allocation of private IP addresses to 
member network devices; 
30 a cluster member management module, designed to manage 



member network devices in a concentrate manner, and to forward 
management messages, which are from outside of the cluster 
and destined to member devices, through the standard network 
address translation module to respective member devices to 
process, so that the member devices can process the management 
messages according to normal processing process; 

a topological information processing module, designed 
to detect the topological architecture of network and to 
acquire the information of topological architecture of 
network within a specified number of hops in the network; 

the member device manager comprises: 

a cluster member management module, designed to 
accomplish cluster management at the member device end; 

a topological information processing module, designed 
to accomplish detection of adjacent devices and 
response/forwarding of topology acquisition requests. 



